I think that's basically right. Obviously the situation is a total mess, with congress in gridlock, the NCAA struggling to update Bylaw 12 (to meet anti-trust restrictions) and states continuing to push popular - but confusing and contradictory - NIL laws.
The NCAA requires students to follow school rules and policies on NIL. It varies by state and school, but SU, as one example, has an intellectual rights sharing agreement with athletes - so they can use SU's logos. But according to
Inside Higher Ed, there are three important restrictions (at least one seemingly violated by the Texas A&M booster scheme):
Under the [NCAA's NIL] policy, athletes cannot accept NIL deals unless they play, compensation cannot be contingent upon their enrollment at a particular school or their athletic achievement and athletes cannot accept payment from their institution in exchange for use of their name, image or likeness.
While some NCAA athletes cash in on NIL, others lose out.